Behavioral task
behavioral1
Sample
dfa6940a4242116b868a5a549274dc83.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfa6940a4242116b868a5a549274dc83.exe
Resource
win10v2004-20240226-en
General
-
Target
dfa6940a4242116b868a5a549274dc83
-
Size
39KB
-
MD5
dfa6940a4242116b868a5a549274dc83
-
SHA1
664d41c7fd7f3c0bb2c5694d9a6c4743e9c46870
-
SHA256
e8e9dc6d6c533a5812578d6370d0dd62147966539ebc113b955acf383568c6b3
-
SHA512
701ae906d5a0ee1d5b53c1d138c632c23a396df9231c2966a56ae17686a6910bd71e7ecf24f361caacae7284e49103968405dcd5f2b239ae2d3a9aa7190e591d
-
SSDEEP
768:EnG1zQ6v1h3hovwbynAJJxjS8040xPM2eKroS5QT1g:En6zjpGwbyo3mE4PM2egoSOa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa6940a4242116b868a5a549274dc83
Files
-
dfa6940a4242116b868a5a549274dc83.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE